{"data":{"id":"b9810520-aa4c-4cf4-beff-3875168ccc59","title":"CVE-2026-117559: DroidMind through 0.4.0 contains a command injection vulnerability that allows MCP clients to bypass the shell command…","summary":"DroidMind through 0.4.0 contains a command injection flaw (CVE-2026-117559) that lets MCP clients bypass the shell command allowlist using $(...) or backtick substitution. Attackers, including prompt-injected agents, can pass commands through parameters interpolated into Device.run_shell() or the unvalidated Device.list_directory() to run blocked commands such as reboot on connected Android devices.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-117559","publishedAt":"2026-10-27T14:16:37.987Z","cveId":"CVE-2026-117559","cweIds":["CWE-78"],"cvssScore":"7.8","cvssSeverity":"high","severity":"high","attackType":["prompt_injection","other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["DroidMind","MCP clients"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"DroidMind command injection bypasses shell allowlist via MCP clients","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"local","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0,"epssCheckedAt":"2026-10-27T18:10:55.407Z","kevDateAdded":null,"advisoryAliases":["GHSA-533h-cccj-x6hp"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-27T18:11:00.899Z","patchAvailable":null,"disclosureDate":"2026-10-27T14:16:37.987Z","capecIds":["CAPEC-88"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":["AML.T0051"]}}